Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Notion Themes by nbundle.com

CRITICAL RISKRemoved from Chrome Web Store

Notion Themes by nbundle.com

ID: hnkidnkbclkdphjdajkcealmfagonpdl

Could be malicious

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Removed

Version

0.0.9

Size

0.04 MB

Rating

3.3/5

Reviews

Users

5,262

Type

Extension

Updated

Aug 10, 2022

Publisher Contextual Analysis

Trusted

Author: http://nbundle.comView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: Yes
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

12,555

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Make Notion pretty with custom themes and fonts

Notion Themes by nbundle.com allows you to customize your Notion custom themes and fonts. Notion Themes by nbundle.com works with the Notion Mac App, the Notion Windows App, and the Notion Web App on Google Chrome, Brave, Microsoft Edge, & Firefox. Go to https://nbundle.com to get access to even more powerful Notion apps.

User Growth

Showing data from Jul 21, 2022 to Mar 05, 2023

Versions

+83.28%(+2,391 users)

Compared to 3 months ago

3 versions released in this period

Rating Count

Total: 9 ratings

Average Rating

Current: 3.33 / 5.0+3.33

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High3

Medium3

Low0

Versions scanned

Showing 1 of 3 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
0.0.8 Code review	6

Extension Version	Code Review Findings
0.0.8	6

Files with findings

3 distinct paths — top paths by unique finding count:

nbundle/app.js2
nbundle/background.js2
nbundle/content.js2

S.No.	Category	Severity	File	Summary	Found in Version
1	Privilege Escalation	high	nbundle/background.js (line 50)	The background script exposes a generic function-dispatch bridge to any web page on notion.so via `chrome.runtime.onMessageExternal`. Any XSS vulnerability on notion.so—or a compromised notion.so page—could send messa…	0.0.8
2	Remote Code Loading	high	nbundle/background.js (line 486)	The background service worker fetches theme JSON, font JSON, and raw CSS files from a third-party Netlify domain (`notionthemes.netlify.app`) at runtime. This constitutes remote code/content loading: if the Netlify ho…	0.0.8
3	Remote Code Loading	high	nbundle/app.js (line 650)	Remotely fetched CSS content (from `notionthemes.netlify.app`) is assigned directly to `style.innerHTML` and appended to the Notion page's `<head>`. Setting `innerHTML` on a style element with untrusted remote content…	0.0.8
4	Code Injection	medium	nbundle/content.js (line 436)	The content script dynamically injects `app.js` as a `<script>` element into the Notion page's `document.body`. This moves the extension's application code out of the isolated content-script sandbox and into the main …	0.0.8
5	Phishing	medium	nbundle/content.js (line 562)	A polling interval fires every 250ms and, after 8 failed checks for a sibling extension (`nbundle`), triggers a blocking `alert()` dialog inside the Notion page coercing users to install an external browser extension.…	0.0.8
6	Unauthorized Data Collection	medium	nbundle/app.js (line 715)	The user-selected font name `f` (sourced from a remote server list) is interpolated directly into a CSS string without sanitization and written to a `<style>` element's `innerHTML` in the page. If the remote fonts lis…	0.0.8

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
notionthemes.netlify.app;	-	https://notionthemes.netlify.app;
fonts.googleapis.com;	-	https://fonts.googleapis.com;
www.notion.so	/*	https://www.notion.so/*
www.notion.so	-	https://www.notion.so
notionthemes.netlify.app	/themes.json	https://notionthemes.netlify.app/themes.json
notionthemes.netlify.app	/fonts.json	https://notionthemes.netlify.app/fonts.json
notionthemes.netlify.app	-	https://notionthemes.netlify.app/
github.com	/facebook/regenerator/blob/main/LICENSE	https://github.com/facebook/regenerator/blob/main/LICENSE
www.w3.org	/2000/svg	http://www.w3.org/2000/svg

Showing 1 to 10 of 20 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

3.6 out of 5 · 8 most recent reviews

Text reviews

Positive

Negative

most of the themes do not work. only a few do work like 2 or 3... the same to the fonts. i dont know what im doing wrong because everything is enabled.

Flávio·30 Dec 2022

For those who couldn't figure out how to make it work, here's a brief instruction: 1. Make sure to install "nbundle - App Store for Notion" extension first, it's a separate one and is required. 2. Install this "Notion Themes by nbundle.com" extension. (Skip if already installed) 3. Make sure both the extensions are Enabled in the "extensions" menu, it should, by default. 4. Open the Notion website / Refresh the tab if already opened. (or close it and reopen) 5. Click on the four square icon on the top right corner of Notion page (between Share and Comment) 6. Go to "Settings & apps" and enable "Notion Themes". Hope it helps <3

Bishal Poonia·29 Dec 2022

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Notion Themes by nbundle.com

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 3 Versions6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating